Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File:                     1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier:          VEZh6I4UNZeuIFQ6KilV0UE8SnYFidGyRgojYsiWAAE=
Subject key identifier:   FB:CC:C6:64:31:E6:1D:05:DF:84:36:81:EB:DE:09:C9:E4:F0:BE:B6
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019F1153199B95149D57604D942CD61AEDD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number:          ED
Signing time:             Mon 29 Jun 2026 03:01:26 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:26 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:26 +0000
Files and hashes:         1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: OgTi4CH4XdsBQCSB4/0mx7BNUeNNirsVc5WgkvIIffU=)
                          2: DjQMqg2kffWJVFlf9YdB26kT8mU.asa (hash: Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:53:19:9b:95:14:9d:57:60:4d:94:2c:d6:1a:ed:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: Jun 29 03:01:26 2026 GMT
            Not After : Jun 30 03:01:26 2026 GMT
        Subject: CN=fbccc66431e61d05df843681ebde09c9e4f0beb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:40:9e:1f:6d:0a:f4:48:44:49:24:11:c7:
                    74:f8:d8:e8:31:e4:38:7d:5f:f2:e2:4a:9d:f9:68:
                    9f:79:37:23:21:07:27:53:69:13:6e:0b:ce:88:f6:
                    7e:b6:a1:ab:e2:44:5d:82:07:5e:72:89:bf:14:d6:
                    6a:48:df:c6:58:9c:9d:f3:5f:9a:05:58:31:ae:13:
                    77:7a:91:f1:a3:ad:e4:15:5b:75:c4:89:10:74:27:
                    6b:02:37:7f:60:85:72:3a:0a:fe:74:40:06:50:f4:
                    ac:68:d7:18:4a:40:51:75:c9:44:34:44:da:ee:82:
                    82:14:97:01:02:98:39:99:49:7f:89:96:88:9f:1d:
                    a5:66:05:fa:c9:3d:c7:f3:5d:8d:90:02:0a:3d:ed:
                    28:38:83:78:c6:89:e3:e8:5d:3e:39:ff:0a:18:4b:
                    1f:bb:4e:57:21:46:44:0e:88:7a:9a:9a:95:65:fa:
                    3e:07:33:9d:1e:5e:ee:b8:9d:48:7d:e7:67:7e:7b:
                    98:5d:e8:ab:8f:36:ee:b5:06:f9:df:03:9f:b7:5f:
                    f9:9f:5b:d0:4c:ce:77:8a:99:e5:ce:5d:08:a7:42:
                    2b:d3:16:3a:f7:7b:e8:18:e3:d3:0d:d3:60:b6:42:
                    45:0e:fb:c8:fa:a3:32:ff:72:1a:ca:5b:3a:09:ce:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CC:C6:64:31:E6:1D:05:DF:84:36:81:EB:DE:09:C9:E4:F0:BE:B6
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:da:42:67:b5:1c:4e:e2:25:9b:93:52:d0:74:df:1d:31:
         d0:8d:af:ca:2c:72:d3:24:91:bb:53:80:43:29:d6:ed:a2:7a:
         7e:6c:17:8c:9a:f2:a7:49:c1:87:ac:67:d0:8d:b1:e0:d5:3c:
         57:4e:b9:6a:a2:55:d7:60:8f:e8:a6:a6:a8:0b:25:6a:09:01:
         d3:ad:ee:49:05:9a:32:cf:cd:35:8a:f4:44:c6:29:0b:c9:b7:
         63:03:1c:89:ca:d0:17:68:8f:15:61:50:86:f8:6a:bb:b5:44:
         c9:dc:d3:3c:9b:22:44:ef:61:00:78:dc:27:e7:3a:1f:3a:56:
         31:b4:1f:0e:07:d3:0b:1a:c8:5f:56:0f:f9:d0:f1:ae:96:d4:
         28:ce:25:be:34:d4:3c:94:70:30:c7:4d:e5:1d:e5:f8:07:20:
         8e:3d:fd:e6:5c:70:73:90:8c:e2:28:d8:2f:a9:bc:19:fc:de:
         5b:00:8e:90:a1:f7:23:b5:11:92:6e:45:e0:83:e1:46:6e:77:
         5c:a7:80:7a:5c:2b:f9:80:d2:f2:17:bc:8f:d3:f2:6b:51:2a:
         1d:43:8f:c4:75:62:d1:e3:01:16:3d:28:e1:c4:31:6a:09:12:
         57:62:16:98:dd:2a:a6:cc:59:3e:45:04:bd:50:a4:65:63:40:
         11:1b:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:15 2026 by rpki-client